In logman, should All Instances include _Total? RRS feed

  • Question

  • Hello

    If this question has already been asked and answered elsewhere, my apologies.

    I want to collect IIS worker process perfmon data using logman.  When I add counters in PerfMon, choosing All Instances gives all instances (each w3wp process for each application pool, plus _Total).  When I try to get the same in "logman  create counter" using

    -c "\w3svc_w3wp(*)\*"

    All I get is _Total, none of the individual instances.

    Through getting the wrong end of the stick about parent/instance#index (from http://technet.microsoft.com/en-us/library/bb490956.aspx), I happened into trying

    -c "\w3svc_w3wp(**)\*"

    which gave the individual instances but not _Total.  I've tried a combination of using (**) and (_Total), but that gave the individual instances only.

    I'm sure I'm doing something simple wrong and would appreciate someone telling me what it is.

    Thank you



    Tuesday, July 24, 2012 9:57 PM

All replies

  • Hello again

    I've continued trying to collect program counters for all instances, not only _Total, and not only every individual instance bar _Total.

    I thought that it was just Logman that didn't agree with my expectations, but I'm having the same problem with Data Collector Sets made in PerfMon.  When running live in PerfMon, I'm collecting for all the instances, which translates as "*" when adding the counters, but specifically names the instances when I look in

    • System Monitor Log for that Data Collector Set
    • Logman query for that Data Collector Set.

    (Presumably this means that the application pool worker processes would not be picked up if the application pool recycles, thus changing the ID number at the start of the instance name.  But that does not apply to processor instances.)

    But when I look at the binary log file in PerfMon, I'm only seeing counters for instance "_Total".

    So, it seems that the recorded counters are the same whether I use logman and specify instance "*", or whether I use PerfMon and create a new Data Collector Set from the current live counters.  I only get results for _Total, not for individual instances.

    I would appreciate guidance to documentation that explains that this is the expected behaviour, or an explanation of how to collect the counters for the individual instances other than in real time.

    Please help.  Thanks


    Monday, August 13, 2012 12:06 PM
  • I'm seeing the exact problem in using logman, when running with command I notice only _Total collected, but not for individual instances.

    logman create counter perf_log2 -c "\Process(*)\*"

    logman start perf_log2

    Could someone share some light on this? 

    Tuesday, August 28, 2012 5:08 PM
  • Hi tinghf, thanks for joining in.

    I'm no nearer being able to collect for individual instances in logman, apart from for Object "Network Interface" (which works as was intended) and (as mentioned above) using "(**)" for objects "W3SVC_W3WP" and "WAS_W3WP" (which gives individual worker processes but not "_Total").

    If this is working correctly for anyone, please let me know.  Thanks


    Tuesday, September 4, 2012 5:09 PM
  • I've found that when you open up the binary log, only the _Total instance is shown by default.  However, I was able to use "Add Counter" to force all the individual instances to display. Does that help?

    The concept of retro-actively "adding" a counter to an existing trace certainly is unintuitive.


    Friday, March 29, 2013 4:24 PM
  • John, thanks for your reply

    It'll be a few days before I can try this for myself, and I need to try it for myself to see what you mean.  I'm sure you're going to be on the right lines.  Thanks for now...


    Monday, April 1, 2013 10:17 PM
  • Thanks for this answer John - been beating my head against the wall on this for some time!
    Tuesday, January 28, 2014 2:12 PM
  • I know it was 7 years ago but thank you for this hint :)
    Friday, May 29, 2020 6:27 PM